Read the docs

Php-nuke

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Php-nuke records in CISA KEV

No Php-nuke vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Downloadsplus Module · all components

Priority MEDIUM 46

Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with (1) .htm, (2) .html, or (3) .txt extensions, then accessing it via…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.04208 Published 2008-10-28 No fix listed CWE-20
Open these records in search →